Microsoft Kernel Mode Security Support Provider Interface (ksecdd.sys) Security Policy Document
This Security Policy is non-proprietary and may be reproduced only in its original entirety (without revision)
24
BCryptAddContextFunctionProvider
Adds a provider to a context function provider list.
BCryptConfigureContext
Configures a context.
BCryptConfigureContextFunction
Configures a context function.
BCryptConfigureContextFunction
Configures a context function.
BCryptCreateContext
Creates a new configuration context.
BCryptDeleteContext
Deletes a configuration context.
BCryptEnumAlgorithms
Enumerates the algorithms for a given set of operations.
BCryptEnumContextFunctionProviders
Enumerates the providers in a context function provider list.
BCryptEnumContextFunctions
Enumerates the functions (algorithms or suites) in a context
function list.
BCryptEnumContexts
Enumerates the configuration contexts in the specified table.
BCryptEnumProviders
Returns a list of providers for a given algorithm.
BCryptEnumRegisteredProviders
Enumerates the providers currently registered on the local
machine.
BCryptQueryContextConfiguration
Queries the current configuration of a context.
BCryptQueryContextFunctionConfiguration
Queries the current configuration of a context function.
BCryptQueryContextFunctionProperty
Queries the current value of a context function property.
BCryptQueryProviderRegistration
Retrieves registration information for a provider.
BCryptRegisterConfigChangeNotify
This API differs slightly between User-Mode and Kernel-
Mode.
BCryptRegisterProvider
Registers a provider for usage on the local machine.
BCryptRemoveContextFunction
Removes a function (algorithm or cipher-suite) from a
context function list.
BCryptRemoveContextFunctionProvider
Removes a provider from a context function provider list.
BCryptResolveProviders
This is the main API in Crypto configuration. It resolves
queries against the set of providers currently registered on
the local system and the configuration information specified
in the machine and domain configuration tables, returning
an ordered list of references to one or more providers
matching the specified criteria.
BCryptSetContextFunctionProperty
Creates, modifies, or deletes a context function property.
BCryptUnregisterConfigChangeNotify
This API differs slightly between User-Mode and Kernel-
Mode.
BCryptUnregisterProvider
Removes provider registration information from the local
machine.
5.16
Other Interfaces
The following table lists other non-approved APIs exported from KSECDD.SYS crypto module.
Function Name
Description
InitSecurityInterfaceW
AcquireCredentialsHandleW
QueryCredentialsAttributesW
SetCredentialsAttributesW
AddCredentialsW
FreeCredentialsHandle
InitializeSecurityContextW
AcceptSecurityContext
ImpersonateSecurityContext
RevertSecurityContext
DeleteSecurityContext
ApplyControlToken